Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/uyKUW8KTfriiyqGTZOzY7k56Mrs.roa
File: uyKUW8KTfriiyqGTZOzY7k56Mrs.roa (raw, json)
Hash identifier: pw4cO1cuirc9e1ywjLg8XskIW9a250DHQKC0D6t9uvU=
Subject key identifier: BB:22:94:5B:C2:93:7E:B8:A2:CA:A1:93:64:EC:D8:EE:4E:7A:32:BB
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 0185EF7C7048932629A7D033DB87E6FB2BC7
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/uyKUW8KTfriiyqGTZOzY7k56Mrs.roa
Signing time: Thu 26 Jan 2023 19:09:47 +0000
ROA not before: Thu 26 Jan 2023 19:09:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:ef:7c:70:48:93:26:29:a7:d0:33:db:87:e6:fb:2b:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jan 26 19:09:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bb22945bc2937eb8a2caa19364ecd8ee4e7a32bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:4a:6a:27:9b:32:07:92:3e:92:95:52:a4:55:
21:7d:9b:1f:62:d7:73:2f:ea:c1:8c:90:83:f7:80:
1d:ec:f2:43:4d:dd:3f:01:ab:ea:31:e6:24:05:a2:
e1:ce:47:b3:08:b7:f5:2e:c7:32:26:73:d0:c5:9d:
5a:ef:25:40:4d:ab:ba:e9:07:4a:2e:5b:98:60:13:
50:de:a4:5a:d3:a0:f2:e4:7b:af:8f:fd:d5:ab:5f:
cd:a4:1c:9f:ed:0b:8e:86:b1:9a:9b:7c:c0:44:5a:
9a:12:32:f9:40:5e:8a:49:c9:59:a8:13:b8:9b:57:
cf:72:24:93:53:bd:8e:f0:eb:ce:23:7f:52:1a:bd:
c6:30:d2:91:61:b3:87:94:17:ea:33:0d:72:3c:cf:
a5:19:2c:0d:55:84:ad:f6:f7:ec:38:ed:95:4f:a6:
e4:54:c2:cd:19:12:95:9d:3b:a4:3f:86:78:ff:7a:
79:a1:7c:29:af:61:c0:e0:20:22:c7:d6:32:d6:28:
bb:b0:83:8f:01:26:c9:fe:5e:09:d0:65:09:ad:0b:
15:ac:16:58:21:69:3a:16:31:31:ff:3c:26:e3:13:
c8:b4:f5:e8:33:7e:2b:35:89:85:bf:21:ff:75:93:
cf:03:5e:24:c8:f8:64:ab:85:4f:06:92:73:a7:1b:
1f:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:22:94:5B:C2:93:7E:B8:A2:CA:A1:93:64:EC:D8:EE:4E:7A:32:BB
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/uyKUW8KTfriiyqGTZOzY7k56Mrs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
45:ef:55:b0:94:0a:bb:56:5b:f3:79:65:f1:58:a9:be:f1:71:
37:32:62:5c:b7:5a:2f:82:54:02:ce:45:cb:8b:c9:95:36:ba:
1c:65:db:bf:2d:f0:69:ce:98:38:b2:f3:74:3d:bc:5d:57:95:
26:f2:5a:a3:fd:93:4c:29:d4:b3:d1:86:e4:6a:98:38:63:96:
b8:57:c3:b5:cf:1f:8e:48:86:ed:b5:1c:fe:dc:61:ea:67:74:
57:42:b7:88:4b:6a:6f:33:d3:7e:ca:3a:52:ae:e7:22:4a:94:
4d:03:0e:c2:6a:be:bc:07:55:9b:21:f6:05:2b:ee:71:df:59:
18:2d:04:ad:04:32:bc:bd:0b:8c:cc:be:7b:ab:7f:63:14:af:
85:6d:0a:8b:90:3f:0c:1a:99:52:be:54:1f:d1:a1:9f:de:1b:
15:51:d6:91:8f:ab:24:9d:9a:8e:65:40:fe:e3:71:06:c6:cc:
52:5e:37:4c:74:30:39:be:14:f6:a1:86:7d:8e:2e:2c:26:40:
8c:34:6d:8f:ca:4b:73:3a:2e:d6:5f:36:e1:c6:f2:f0:79:f6:
7d:ca:db:a8:6f:e0:75:68:8c:ee:89:83:02:13:54:74:c4:2c:
d6:3f:71:3b:f5:23:de:18:2b:e8:2a:4b:91:fc:7c:6e:15:7a:
d5:c8:16:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 00:00:17 2025 by rpki-client